PT-2023-13587 · Intel · Intel(R) Nuc Chaco Canyon Bios Update
CVE-2022-38101
·
Published
2023-05-10
·
Updated
2023-05-22
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Intel(R) NUC Chaco Canyon BIOS update software versions prior to iFlashV Windows 5.13.00.2105
Description
The issue is related to an uncontrolled search path in the BIOS update software, which may allow an authenticated user to potentially enable escalation of privilege via local access.
Recommendations
For versions prior to iFlashV Windows 5.13.00.2105, update to version iFlashV Windows 5.13.00.2105 or later to resolve the issue.
Fix
Uncontrolled Search Path Element
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Intel(R) Nuc Chaco Canyon Bios Update